General
- Target 2026-10-26_c871fd53ec4d2b9e4dbf71d82024f0a1_elex_wannacry
- Size 68KB
- Sample261027-hrcezabs3v
- SHA256 47e859c4540ced3dd8ccf4a4a9441b90c37bba9df165a12e8889bfcfb9e3033d
- MD5 c871fd53ec4d2b9e4dbf71d82024f0a1
- SHA1 6751d1ed0298325ba9e14351a282bbd9c74c09d7
- SHA512 8ee89f9434718c1f20c0c41bec87fffeac8781b06db64706b58db777c8d0254a5ea4ebd17ef70450c04a815b9dd59ec75f3abc69042ea64b2dd06389004d3248
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqwEUY04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLrof4/CFsrdU
- TLSH T165632B4306BD7CF3E54B293028A845745DE667C06209E97B7FECD90BE02B96D9CED086
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-26_c871fd53ec4d2b9e4dbf71d82024f0a1_elex_wannacry.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-26_c871fd53ec4d2b9e4dbf71d82024f0a1_elex_wannacry.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-26_c871fd53ec4d2b9e4dbf71d82024f0a1_elex_wannacry
- Size 68KB
- SHA256 47e859c4540ced3dd8ccf4a4a9441b90c37bba9df165a12e8889bfcfb9e3033d
- MD5 c871fd53ec4d2b9e4dbf71d82024f0a1
- SHA1 6751d1ed0298325ba9e14351a282bbd9c74c09d7
- SHA512 8ee89f9434718c1f20c0c41bec87fffeac8781b06db64706b58db777c8d0254a5ea4ebd17ef70450c04a815b9dd59ec75f3abc69042ea64b2dd06389004d3248
- SSDEEP 192:1bOzawOs81elJHsc458cRZOsdShcWaOT2QLrCqwEUY04/CFxyNhoy5tU:1bLwOs8AHsc42M9ghKQLrof4/CFsrdU
- TLSH T165632B4306BD7CF3E54B293028A845745DE667C06209E97B7FECD90BE02B96D9CED086
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Detects Stormser aka Storm DDoS and StormAttack
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE